mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
Alec ThomasandClaude Opus 4.6
688846e9bb
Replace MySQL 8.0 with Postgres 17 across the entire stack: - Add declarative schema/schema.sql for pgschema (merged from 21 migrations) - Delete migrations/ directory (sqlx migrations no longer used) - Update all sprout-db queries: positional $N params, ON CONFLICT, string_agg, array_position, encode(), pg_catalog partitions - Update sprout-audit: pg_advisory_lock replaces GET_LOCK - Update docker-compose, .env.example, justfile, CI, and scripts - Cargo.toml: sqlx mysql feature → postgres Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Ai-assisted: true
95 lines
4.2 KiB
Bash
95 lines
4.2 KiB
Bash
# =============================================================================
|
|
# Sprout Backend — Local Development Environment
|
|
# =============================================================================
|
|
# Copy this file to .env and adjust as needed:
|
|
# cp .env.example .env
|
|
#
|
|
# All defaults here work with `docker compose up` out of the box.
|
|
#
|
|
# Service ports (defaults):
|
|
# Postgres → localhost:5432
|
|
# Redis → localhost:6379
|
|
# Typesense → localhost:8108
|
|
# Adminer → localhost:8082 (DB browser UI)
|
|
#
|
|
# Note: If port 8082 conflicts, change the adminer port in docker-compose.yml
|
|
# =============================================================================
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Database (Postgres 17)
|
|
# -----------------------------------------------------------------------------
|
|
DATABASE_URL=postgres://sprout:sprout_dev@localhost:5432/sprout
|
|
PGHOST=localhost
|
|
PGPORT=5432
|
|
PGUSER=sprout
|
|
PGPASSWORD=sprout_dev
|
|
PGDATABASE=sprout
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Redis 7
|
|
# -----------------------------------------------------------------------------
|
|
REDIS_URL=redis://localhost:6379
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Typesense (search)
|
|
# -----------------------------------------------------------------------------
|
|
TYPESENSE_API_KEY=sprout_dev_key
|
|
TYPESENSE_URL=http://localhost:8108
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Relay (WebSocket server)
|
|
# -----------------------------------------------------------------------------
|
|
# Bind address for the relay (host:port)
|
|
SPROUT_BIND_ADDR=0.0.0.0:3000
|
|
# Public WebSocket URL — used in NIP-42 auth challenges
|
|
RELAY_URL=ws://localhost:3000
|
|
# Set to true in production to require bearer token authentication
|
|
SPROUT_REQUIRE_AUTH_TOKEN=false
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Auth
|
|
# -----------------------------------------------------------------------------
|
|
# Set to false for dev (accepts NIP-42 without JWT, allows X-Pubkey header).
|
|
# Set to true in production to require bearer token authentication.
|
|
SPROUT_REQUIRE_AUTH_TOKEN=false
|
|
|
|
# JWKS endpoint for verifying JWT access tokens.
|
|
# Claim that carries the user's Nostr public key (hex, 32 bytes).
|
|
OKTA_PUBKEY_CLAIM=nostr_pubkey
|
|
|
|
# ── Keycloak (local OAuth testing — stands in for Okta in prod) ──────────────
|
|
# Keycloak is NOT a production dependency. It lets you test the full OAuth
|
|
# flow locally without needing an Okta tenant. Run `docker compose up -d`
|
|
# then `./scripts/setup-keycloak.sh` to create the realm, client, and users.
|
|
#
|
|
# Admin UI: http://localhost:8180 (admin / admin)
|
|
# Get a token:
|
|
# curl -s -X POST http://localhost:8180/realms/sprout/protocol/openid-connect/token \
|
|
# -d 'client_id=sprout-desktop&grant_type=password&username=tyler&password=password123' \
|
|
# | jq -r .access_token
|
|
OKTA_JWKS_URI=http://localhost:8180/realms/sprout/protocol/openid-connect/certs
|
|
OKTA_ISSUER=http://localhost:8180/realms/sprout
|
|
OKTA_AUDIENCE=sprout-desktop
|
|
|
|
# ── Okta (production / staging) ──────────────────────────────────────────────
|
|
# Uncomment and fill in when deploying against a real Okta tenant.
|
|
# OKTA_JWKS_URI=https://dev-example.okta.com/oauth2/default/v1/keys
|
|
# OKTA_ISSUER=https://dev-example.okta.com/oauth2/default
|
|
# OKTA_AUDIENCE=sprout-api
|
|
# OKTA_PUBKEY_CLAIM=nostr_pubkey
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Logging / Tracing
|
|
# -----------------------------------------------------------------------------
|
|
RUST_LOG=sprout_relay=debug,sprout_db=debug,sprout_auth=debug,sprout_pubsub=debug,tower_http=debug
|
|
|
|
# OTLP tracing endpoint (optional — leave unset to disable)
|
|
# OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Huddle (LiveKit integration)
|
|
# -----------------------------------------------------------------------------
|
|
# LIVEKIT_API_KEY=devkey
|
|
# LIVEKIT_API_SECRET=devsecret
|
|
# LIVEKIT_URL=ws://localhost:7880
|